From 492573cd73f486ebbe325349d2b72e9f274342ac Mon Sep 17 00:00:00 2001 From: Kaxil Naik Date: Tue, 22 Jun 2021 12:33:08 +0100 Subject: [PATCH] Exclude ``yarn.lock`` from built Python wheel file (#16577) Same as https://github.com/apache/airflow/pull/16494 - However that PR had to be reverted in https://github.com/apache/airflow/pull/16518 as it failed building of PROD image, this PR/commit will fix it. PROBLEM: Currently the airflow wheel is built with the yarn.lock which is not actually used by the airflow itself. Having this file in the docker image causes the clair and trivy scanners to fail FIX: The fix is to exclude the yarn.lock by specifying it in the manifest.in (cherry picked from commit aa79bfe7e71f5e90dbfb3f2deb3ad5b44e3259ab) (cherry picked from commit 6c80e3ff59e3d265c24cfa2d402cfd2ad500d7ee) (cherry picked from commit 25d46e4e99a6f98765e5c10e0775415f0eaaf11b) --- MANIFEST.in | 1 + 1 file changed, 1 insertion(+) diff --git a/MANIFEST.in b/MANIFEST.in index dae0f3efef4ad2..a51a2fed05f6cb 100644 --- a/MANIFEST.in +++ b/MANIFEST.in @@ -35,3 +35,4 @@ graft scripts/upstart graft airflow/config_templates recursive-exclude airflow/www_rbac/node_modules * global-exclude __pycache__ *.pyc +exclude airflow/www_rbac/yarn.lock